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Top Stories 

• Three suspects were charged March 16 in Connecticut for their roles in a multimillion 
dollar international fraud scheme in which they allegedly used altered documents and a 
U.S. Department of Agriculture program to secure loans and transfer funds to banks 
overseas. - U.S. Attorney’s Office, District of Connecticut (See item 6) 

• A water advisory was issued for Port Angeles Harbor in Washington March 16 - March 23 
following heavy rainfall that caused 7 million gallons of diluted sewage to spill into the 
water. - Peninsula Daily News (See item 15) 

• Nearly $5 million was seized from accounts affiliated with North Carolina-based Gate City 
Transportation after the company allegedly billed Medicaid over $19 million for fraudulent 
ambulance services. - Greensboro News & Record (See item 16) 

• Oregon-based Advantage Dental reported March 16 that information for over 15 1,000 
patients was accessed after its internal membership database was breached in February 
when an employee’s computer was infected with malware. - Bend Bulletin (See item 17) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

1. March 16, Associated Press - (West Virginia) 2 former Freedom owners plead guilty 
in chemical spill case. Two former owners of Freedom Industries pleaded guilty 
March 16 in separate hearings to causing an unlawful discharge of a coal-cleaning 
agent at the company’s Charleston facility into the Elk River in January 2014, 
contaminating the water supply of about 300,000 residents of West Virginia. A former 
owner and the former president of the company also face charges in connection to the 
incident. 

Source: http://abcnews.go.com/US/wireStorv/freedom-owners-set-plea-hearings-spill- 
case-29665700 
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Nuclear Reactors, Materials, and Waste Sector 

2. March 16, South Jersey Times - (New Jersey) Salem 1 reactor shut down hy PSEG 
Nuclear after failure to meet deadline to fix cooling unit. PSEG Nuclear shut down 
the Salem 1 reactor on Artificial Island in Lower Alloways Creek Township March 15 
after workers failed to repair a faulty fan cooling unit inside a containment building in 
time to comply with U.S. Nuclear Regulatory Commission requirements. The other two 
reactors at the complex are operating at full power, and the company has no timetable 
for Salem 1 ’s return to service. 

Source: 

http://www.nj.eom/salem/index.ssf/2015/03/salem 1 reactor shut down by pseg nuc 
lear after fa.html 

3. March 16, Associated Press - (Pennsylvania) DEP searching for missing gauge 
containing nuclear material. The Pennsylvania Department of Environmental 
Protection requested the public’s assistance in locating a Troxler Model 341 IB nuclear 
gauge containing radioactive material that was found missing March 13. The gauge 
poses no health risk unless it is broken open, interfered with, or suffers damage. 

Source: http://pittsburgh.cbslocal.eom/2015/03/16/dep-searching-for-missing-gauge- 
containing-nuclear-material/ 

[ Return to top] 

Critical Manufacturing Sector 

4. March 16, U.S. Environmental Protection Agency — (Indiana) U.S. and Indiana settle 
Clean Air Act case with Muncie smelter to reduce lead emissions. Exide 
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Technologies reached a settlement March 16 with the U.S. Environmental Protection 
Agency and the State of Indiana to resolve a lawsuit over Clean Air Act violations at its 
lead smelter facility in Muncie for failing to comply with national emission standards 
which resulted in the release of excess lead. The company will spend over $3.9 mi llion 
to install new pollution control equipment and pay an $820,000 penalty. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/cf658438cdla4a8485257e0a006abeb4 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. March 16, KERO 23 Bakersfield - (California) Three defendants plead guilty in 
Bakersfield mortgage fraud scheme. Three Bakersfield residents pleaded guilty 
March 16 to charges related to a $5.6 million mortgage fraud scheme in which the 
defendants allegedly conspired with others to use straw buyers and fraudulent loan 
applications to purchase properties developed by Jara Brother Investments and 
Pershing Partners EEC from 2007-2010. Eour co-conspirators previously pleaded guilty 
in connection to the scheme and two others were indicted in the case. 

Source: http://www.turnto23.com/news/local-news/three-defendants-plead-guiltv-in- 
bakersfield-mortgage-fraud-scheme 

6. March 16, U.S. Attorney ’s Office, District of Connecticut - (International) Three 
individuals charged with defrauding banks and USD A export financing program. 
The U.S. District Attorney for Connecticut announced March 16 that three suspects 
were charged for their roles in a multimillion dollar fraud scheme in which they 
allegedly used altered documents and a U.S. Department of Agriculture export 
financing program to secure loans from U.S. financial institutions, and then transferred 
the funds to foreign banks in Russia for a commission. The foreign banks defaulted on 
over $10 million worth of loans from 2007-2012. 

Source: http://www.fbi.gov/newhaven/press-releases/2015/three-individuals-charged- 
with-defrauding-banks-and-usda-export-financing-program 

[ Return to top ] 

Transportation Systems Sector 

7. March 17, KPIX 5 San Francisco; San Francisco Bay City News - (California) 

Suspect brandishing gun dies in fiery crash near Bodega Bay after high-speed 
chase. State Highway 1 in Petaluma in Sonoma County was closed in both directions 
for approximately 6 hours March 16-17 while the California Highway Patrol 
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investigated after a suspect who brandished a gun at an area restaurant crashed his 
vehicle into a tree during a high-speed pursuit by police. 

Source: http://sanfrancisco.cbslocal.eom/2015/03/17/suspect-brandishing-gun-dies-in- 
fiery-crash-near-bodega-bay-after-high-speed-chase/ 

8. March 17, WUSA 9 Washington, D.C.; KUSA 9 Denver - (Virginia) ‘Violent’ 
passenger forces flight to return to Dulles. A Denver-bound United Airlines flight 
returned to Washington-Dulles International Airport in Virginia, March 16 after a 
passenger who claimed to have a bomb became violent and attempted to reach the 
cockpit before he was restrained by other passengers. The flight landed safely and local 
law enforcement met the aircraft at the gate to detain the passenger. 

Source: http://www.usatodav.eom/storv/news/nation/2015/03/17/united-flight- 
disturbance/24886535/ 

9. March 17, Dallas Morning News - (Texas) Fiery crash burns up 18-wheeler, shuts 
down Highway 75 in McKinney. A semi-truck crashed into a guardrail and caught fire 
after it blew out a tire on U.S. Highway 75 in McKinney prompting an overnight 
closure of southbound lanes from March 16 to March 17. 

Source: http://thescoopblog.dallasnews.com/2015/03/fiery-crash-burns-up-18-wheeler- 
shuts-down-highwav-75-in-mckinney.html/ 

10. March 16, WDAY 6 Fargo - (North Dakota) One passenger hospitalized following 
emergency landing at Hector International Airport Monday morning. A United 
Airlines flight headed from Anchorage, Alaska, to Chicago was diverted to Hector 
International Airport in Fargo, North Dakota, March 16 due to a passenger suffering a 
medical emergency on board. The flight was delayed for more than 7 hours after crews 
discovered that all of the plane’s medical oxygen was used during the emergency and 
ordered the use of a replacement plane. 

Source: http://www.wdav.com/news/3701224-one-passenger-hospitalized-following- 
emergency-landing-hector- international-airport 

1 1 . March 16, KXAN 36 Austin - (Texas) Rollover wreck kills one and injures two 
others. Westbound lanes of State Highway 71 in Bastrop were closed for more than 2 
hours March 15 after 2 pickup trucks and a car collided, killing 1 and injuring 2 others. 
Source: http://kxan.com/2015/03/15/one-dead-in-three-vehicle-crash-along-highway- 
71/ 
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Food and Agriculture Sector 

12. March 17, Jackson Clarion-Ledger - (Mississippi) Chicken farms catch fire in 
Rankin Co. About 22,000 Koch Foods-owned chickens were killed and 2 chicken 
houses were destroyed in a March 17 fire on a farm near Puckett. Authorities are 
investigating the blaze that started in one structure and spread to the second building 
through a ventilation system. 

Source: http://www.clarionledger.eom/storv/news/2015/03/17/rankin-countv-chicken- 
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coop-fire/24889959/ 



13. March 17, U.S. Food and Drug Administration - (International) Frontier Co-op 
initiates voluntary Class 1 recall due to possible health risk from organic garlic 
powder. The U.S. Food and Drug Administration announced March 16 that Frontier 
Co-op voluntarily issued a reeall for several of its produets manufaetured with organie 
garlie powder that were sold under its Frontier and Simply Organie brands, and one 
product sold under the Whole Foods Market brand due to possible Salmonella 
contamination. The recalled products contain contaminated raw material that was 
supplied to Frontier, and were sold in all U.S. States and in some parts of Canada. 
Souree: http ://w w w . fda. go v/S afety/Recalls/uem43 8 3 60 .htm 

For another story, see item 6 
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Water and Wastewater Systems Sector 

14. March 16, Associated Press - (Montana) Glendive water system back on. The eity of 
Glendive ’s water system was brought back online March 16 after being shut down 
Mareh 14 when residue from an oil spill along the Yellowstone River was deteeted at 
the water plant after an iee breakup released oil that was trapped in the iee sinee the 
January 17 spill. Officials advised 6,000 residents to eonserve water Mareh 14-15 while 
the plant was taken offline and erews installed an aeration system to remove any oil 
residue traees. 

Souree: http://www.greatfallstribune.eom/storv/news/2015/03/16/glendive-water- 
svstem-baek-online/24849457/ 



15. March 16, Peninsula Daily News - (Washington) Rainfall pushes 7 million gallons of 
diluted sewage into Port Angeles Harbor; health officials urge that people stay out 
of water. Clallam County public health offieials issued a water advisory Mareh 16 for 
Port Angeles Harbor in Washington following heavy rainfall March 15 that caused 7 
million gallons of diluted sewage to spill into the water. The advisory was expeeted to 
remain in effeet until Mareh 23. 

Source: http://www.peninsuladailynews .eom/article/20 15031 6/NEWS/l 503 1 997 8 
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Healthcare and Public Health Sector 

16. March 17, Greensboro News & Record - (North Carolina) Government seizes close to 
$5 million from Gate City Transportation and owner. Documents filed with the 
U.S. District Court in Greensboro stated that the federal government seized nearly $5 
million from accounts affiliated with Gate City Transportation and its owner after the 
non-emergency medical transportation company allegedly billed Medicaid over $19 
million for ambulance services from January 2011 to September 2014 while only 
providing transportation services. The company filed fraudulent paperwork stating that 
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they provided basic life support services to patients during transport, even though they 
did not own any ambulances after the fall of 2010. 

Source: http://www.news-record.com/news/local news/government-seizes-close-to- 
million-from-gate-city-transportation-and/article 6da7946e-cc5d-l Ie4-a3e0- 
Ib5cedce9769.html 



17. March 16, Bend Bulletin - (Oregon) Advantage Dental reports data breach. 
Redmond-based Advantage Dental reported March 16 that personal information, 
including Social Security numbers, of over 151,000 patients was accessed after its 
internal membership database was breached in February when an employee’s computer 
was infected with malware. The company has taken additional security steps to prevent 
any future attacks and continues to investigate. 

Source: http://www.bendbulletin.com/health/2984021-151/advantage-dental-reports- 
more-than- 151 000-patient-records# 

18. March 16, Monroe - (Louisiana) Four arrested at Jackson Parish 

Hospital after investigation. Louisiana State Police arrested four individuals March 16 
in connection to payroll fraud, criminal conspiracy, theft, and illegal distribution of 
drugs at Jackson Parish Hospital after an investigation into the hospital’s pharmacy 
department found several accounting discrepancies. 

Source: http ://w w w . thene ws star . com/story/ne w s/local/20 15/03/1 6/four- arrested- 
iackson-parish-hospital-investigation/24868 17 1/ 

19. March 16, Pensacola News Journal - (Florida) Sacred Heart Health System billing 
information hacked. Florida-based Sacred Heart Health System announced March 16 
that the billing information, including names, birth dates, procedures, and diagnoses of 
14,000 patients was compromised when an employee email account of a third-party 
billing vendor was hacked. The health system was notified of the attack February 2 and 
continues to investigate the incident. 

Source: http://www.pnj.eom/storv/news/2015/03/16/sacred-heart-health-svstem-billing- 
information-hacked/24859975/ 
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Government Facilities Sector 

20. March 17, Bloomington Pantograph - (Illinois) FBI: Package sent for testing, IRS 
back to work. Firefighters spent nearly 3 hours at the Internal Revenue Service facility 
in Bloomington, Illinois, March 16 after receiving a call about a suspicious package. 
The package was sent off for testing and work at the site resumed March 17. 

Source: http://www.pantagraph.com/news/fbi-investigating-report-of-suspicious- 
package-at-local-irs-center/article 76075e7e-a987-5496-b588-bf0b4812828b.html 

21. March 16, WSB 2 Atlanta - (Georgia) Bus crash sends students, adults to hospital. 
Three adults and 23 students were transported to an area hospital March 16 following a 
hit-and-run accident involving a Calloway Middle School bus in Clayton County, 
Georgia. Police are still searching for the vehicle that hit the school bus and drove off. 
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Source: http://www.wsbtv.com/news/news/local/bus-crash-sends-students-adults- 
hospital/nkXi9/ 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

22. March 17, Softpedia - (International) D-Link patches against critical remote 

command and code execution flaws. D-Link released firmware updates patching two 
critical vulnerabilities that allowed attackers to intercept network traffic and execute 
commands on vulnerable devices and exploit cross-site request forgery (CSRF) attacks 
to create, modify, or delete data and execute code. 

Source: http://news.softpedia.com/news/D-Link-Patches-Against-Critical-Remote- 
Command-and-Code-Execution-Flaws-47 5976. shtml 



23. March 16, IDG News Service - (International) OpenSSL mystery patches due for 
release Thursday. The OpenSSL Project Team released an advisory stating that 
several undisclosed security vulnerabilities in the open-source encryption software 
which utilizes the Secure Sockets Layer/Transport Layer Security (SSL/TSL) protocol 
will be patched March 19 in versions 1.0.2a, 1.0.1m, l.O.Or, and 0.9.8zf. 

Source: http://www.networkworld.com/article/2897793/openssl-mysterv-patches-due- 
for-release-thursday.html 

24. March 14, ZDNet - (International) BlackBerry begins slow rollout for FREAK 
security flaw, most devices still at risk. BlackBerry confirmed that all versions of 
newer BlackBerry 10 and older 7.1 devices along with Blackberry Enterprise Service 
12 and earlier, as well as the BlackBerry messenger app on Android, iPhones, Windows 
phones, and iPads are all vulnerable to Factoring RSA-EXPORT Key (FREAK) attacks 
that intercept encrypted traffic and force weaker encryption. Blackberry is working to 
mitigate the vulnerability. 

Source: http://www.zdnet.com/article/blackberrv-slow-to-respond-to-freak-flaw-savs- 
it-has-no-fix/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 

25. March 17, Reno Gazette-Journal - (Nevada) Apartment fire displaces 50, 
hospitalizes 3 in south Reno. Three residents were injured and more than 50 others 
were displaced by a 3 -alarm fire at the Lakeside Plaza Condos in Reno March 17. 
Firefighters performed about 30 rescues from the structure and are investigating the 
cause of the fire. 

Source: http://www.rgj.eom/storv/news/2015/03/17/apartment-fire-displaces-injures- 
south-reno/24892897/ 

26. March 16, KCRA 3 Sacramento - (California) Suspicious device at Stockton 
apartment complex deactivated. A bomb squad responded to a Stockton apartment 
complex March 16 to deactivate an explosive device that was found, prompting the 
evacuation of residents for several hours while the device was rendered safe and 
authorities investigated the incident. 

Source: http://www.kcra.com/news/local-news/news-stockton/bomb-squad- 
investigates-suspicious-device-at-stockton-apartment/3 1 824670 

27. March 16, San Antonio Express-News - (Texas) SAPD's bomb squad detonates 
device at Southwest Side Walmart. Police responded to a San Antonio Walmart 
March 16 to investigate a suspicious device believed to be a pipe bomb that was found 
in the store’s parking lot. The device was detonated as a precaution and police are 
investigating the contents of the pipe. 

Source: http://www.mvsanantonio.com/news/local/article/SAPD-s-bomb-squad- 
detonates-device-at-Southwest-6136890.php 

28. March 16, WYTV 33 Youngstown - (Ohio) Fire damages Austintown restaurant. A 
March 15 fire at Los Gallos Mexican Restaurant in Austintown, Ohio, caused an 
estimated $100,000 in damage. The fire is believed to have started in the bar area of the 
restaurant and remains under investigation. 

Source: http://wvtv.eom/2015/03/16/fire-damages-austintown-restaurant-2/ 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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